Information Security Analyst

Purpose of the Job
The Information Security Architect is a senior cybersecurity professional responsible for designing, governing, and implementing enterprise security solutions that protect the organizations infrastructure, cloud environments, data, identities, and AI platforms. The role ensures technology initiatives are secure by design, aligned with business objectives, and compliant with security and regulatory requirements while serving as a trusted advisor to IT, Security, and business stakeholders.
Responsibilities
Lead the architecture and design of strategic security initiatives including ZTNA, PAM/PIM, Passwordless Authentication, Network Segmentation, DLP, CASB, Vulnerability Management, and Threat Detection.
Design and govern security controls across Microsoft Azure/M365, AWS, Google Workspace, cloud, data, and AI environments.
Develop and maintain security architecture standards, technical controls, and governance frameworks.
Ensure logging, monitoring, and telemetry are integrated with SIEM and SOC operations.
Support the secure adoption and governance of AI and Generative AI technologies.
Conduct Information Security Reviews (ISR) for IT projects, assessing risks, vulnerabilities, and compliance requirements.
Provide risk-based recommendations and approve security controls throughout the project lifecycle.
Produce security architecture documentation, solution designs, standards, and architecture decision records (ADRs).
Support compliance initiatives related to ISO 27001, SOC 2, NIST CSF, and CIS Controls.
Act as a trusted advisor to IT leadership, project teams, and business stakeholders.
Participate in architecture review boards, governance forums, and vendor security assessments.
Communicate technical security concepts effectively to both technical and non-technical audiences.
Knowledge & Requirements
Required Experience
5+ years of Information Security/Cybersecurity experience.
2+ years of Security Architecture experience.
Proven track record delivering complex security infrastructure projects from design through implementation.
Experience conducting security risk assessments, architecture reviews, and IT project security governance.
Technical Expertise
Strong experience in multiple areas such as:
Zero Trust Network Access (ZTNA)
Privileged Access Management (PAM/PIM)
Passwordless Authentication
Identity & Access Management (IAM)
Network Security & Segmentation
Data Loss Prevention (DLP)
Cloud Access Security Broker (CASB)
Vulnerability Management
Threat Detection & Security Operations
Technologies
Microsoft Entra ID (Azure AD)
Microsoft Defender XDR Suite
Microsoft Purview
Azure Security Controls
Microsoft Sentinel
AWS Security Services
Google Workspace Security
CSPM (Cloud Security Posture Management)
DSPM (Data Security Posture Management)
AI Security & Governance
Compliance & Frameworks
ISO 27001:2022
SOC 2 Type II
NIST Cybersecurity Framework (NIST CSF)
CIS Controls
Soft Skills
Strong stakeholder management and communication skills.
Ability to translate complex technical concepts into business-friendly language.
Excellent documentation and presentation capabilities.
Strong analytical and risk-management mindset.
Ability to balance security requirements with business needs.
Experience working with cross-functional and global teams.
Preferred
Certifications such as CISSP, CISM, SABSA, TOGAF, or Microsoft SC-100.
Experience with Qualys VMDR, Netskope SASE, Security Automation, Infrastructure as Code (IaC), and global enterprise environments.